CVE-2017-14412 - An invalid memory write was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain ve

CVE-2017-14412

Summary

An invalid memory write was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a denial of service (segmentation fault and application crash) or possibly unspecified other impact.

References

https://blogs.gentoo.org/ago/2017/09/08/mp3gain-invalid-memory-write-in-copy_mp-mpglibdblinterface-c/

Vulnerable Configurations

cpe:2.3:a:mp3gain:mp3gain:1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:mp3gain:mp3gain:1.5.2:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 18-09-2017 - 15:05)
Impact:
Exploitability:

CWE

CWE-787

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

misc

https://blogs.gentoo.org/ago/2017/09/08/mp3gain-invalid-memory-write-in-copy_mp-mpglibdblinterface-c/

Last major update

18-09-2017 - 15:05

Published

13-09-2017 - 03:29

Last modified

18-09-2017 - 15:05